CVE-2023-0003

Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server

MEDIUM

6.5

CVSS Score

Published: February 8, 2023 at 05:22 PM UTC

Updated: June 17, 2026 at 05:24 AM UTC

2 products affected across 2 vendorsFedoraCortex XSOAR

Using Cortex XSOAR by Palo Alto Networks?

Get instant alerts when new vulnerabilities affect Cortex XSOAR - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 1%

SSVC

No known exploit

Description

A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fedora · Fedora Projectrpm

95%

37 38 39

Cortex XSOAR · Palo Alto Networks

95%

6.10.0 ≤ v < 6.10.0.1859646.6 ≤ v < 6.6.B1861156.8 ≤ v < 6.8.B1857196.9 ≤ v < 6.9.B1854156.10.0.0 6.6 6.6.0 2585049 6.6.0 2889656 6.6.0 3049220 6.6.0 3124193 6.8 6.8.0 176620 6.8.0 3261002 6.9 6.9.0 130766 6.9.0 177754

Affected range stops below 6.10.0.185964, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.6.B186115, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.8.B185719, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.9.B185415, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 8.1 All (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://security.paloaltonetworks.com/CVE-2023-0003